Security & privacy

Built for European compliance teams

Attests ReuseProof is designed to be the system of record for sensitive ESPR evidence. We minimize the personal data we handle, keep it in the EU, and give compliance teams an audit trail they can actually defend.

EU data residency

All operational data is hosted in EU data centers. No transfer of personal data outside the EU/EEA.

GDPR readiness

Data minimization on by default, configurable retention, deletion on request, processing register support.

Encryption

TLS 1.2+ in transit, encryption at rest, scoped service credentials and rotation procedures.

Role-based access

Admin, Brand Manager, Warehouse Staff, Partner and Auditor roles with least-privilege access.

Audit trail

Every batch carries a tamper-evident timeline of decisions, approvals and partner confirmations.

Data subject rights

Export and delete personal data attached to batches and handovers on legitimate request.

Data Processing Agreement

A standard DPA aligned with GDPR Art. 28 is available on request. Enterprise customers can negotiate schedules covering sub-processors, data residency, audit rights and incident response SLAs.

Documentation support. Does not replace legal review.